Privacy Policy

PRIVACY AND DATA PROTECTION TERMS

Public data protection terms explain how Nordic Houses KT OÜ processes your data.

• DATA CONTROLLER 

Nordic Houses KT OÜ (registry code 10845709, Harju County, Kuusalu Parish, Kosu village, Sauli, 75608, hereinafter referred to as Nordic Houses or we) is committed to safeguarding your privacy and respecting your rights. Therefore, this privacy notice (Privacy Notice) clearly and transparently explains how we collect, use, and store your personal data. If you have any questions regarding the processing of your data, please get in touch with us at gdpr@nordichouses.eu.

We process personal data under the Privacy Notice and in accordance with applicable legislation, including the General Data Protection Regulation 2016/679 (GDPR) and the applicable national data protection laws in Estonia.

• TERMS USED IN DATA PROTECTION

1. Personal data means any information relating to an identified or identifiable natural person („data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2. Controller means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data, where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
    
3. Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

• WHAT PERSONAL DATA WE COLLECT, FOR WHAT PURPOSE, AND ON WHAT BASIS? 

Nordic Houses’ main activities include designing, manufacturing, and erecting timber frame houses. Nordic Houses KT OÜ primarily processes your data for managing customer relationships, fulfilling contracts with customers, complying with legal obligations imposed by the state, and, in some instances, based on the legitimate interests of Nordic Houses.

Customers and Potential Customers 

We process your:

• Contact information, including name, personal identification code, address, phone number, and email address.
• Other data provided by you is necessary for contract fulfillment.
• Billing information – submitted invoice payments.
• Communication between us.

The legal basis for data processing is the conclusion and performance of the contract, which we cannot do without processing your data.

Candidates

We process the contact information provided by you, including name, personal identification code, address, phone number, email address, and other data provided by you during the application process.

We process your data to assess your suitability for our respective positions. The legal basis for data processing is your consent and taking pre-contractual measures.

Suppliers and Potential Suppliers 

We process the contact information of your representative(s), including name, personal identification code, address, phone number, email address, and other data necessary for contract fulfillment. 

The legal basis for data processing is the conclusion and performance of the contract, which we cannot do without processing your representative(s)’ personal data.

• LEGITIMATE INTEREST 

The Controller may process personal data for specific legitimate business purposes, partially or wholly, including but not limited to the following:

• Strengthening, customizing, or improving our services/communication to benefit clients, suppliers, candidates, and contractors.
• Detecting and preventing fraud.
• We are enhancing the security of our computer network, network connections, and information systems.
• Displaying content and interest-based ads on websites by the Data Controller’s notice about cookies and advertising based on users’ interests.
• We are sending you information that may be of interest to you.
• We are determining the effectiveness of sales promotion campaigns and advertisements. 

When processing data for these purposes, we respect and consider your rights. You have the right to object to such processing, and if you wish to do so, please get in touch with us. Please note that exercising your right to object may affect our ability to provide you with quality services for your benefit.

• DATA RETENTION PERIOD 

We retain personal data collected in our systems in a manner that allows identifying data subjects no longer than necessary for the purpose for which the data was collected or further processed. We determine this period by taking into account the following:

• Retaining collected personal data is necessary to provide quality services and fulfill contracts.
• The need to protect the legitimate interests described in the Data Controller’s objectives.
• The existence of specific legal or statutory obligations that require processing and retention of personal data during specific periods.

• TO WHOM DO WE DISCLOSE YOUR PERSONAL DATA? 

We do not disclose your data except in cases specified in this notice or if we have obtained your consent for specific activities. We may share personal data with suppliers who provide services on our behalf and under our instructions. We do not authorize these suppliers to use or disclose this information except as necessary to provide services on our behalf or to comply with legal requirements. 

Additionally, we may disclose your data (i) as required by law, (ii) at the request of law enforcement agencies or other government officials, and (iii) if we believe that disclosure is necessary or appropriate to prevent physical or financial harm, or in connection with an investigation of suspected fraudulent or illegal activity. We also have the right to disclose your data if we sell or transfer all or part of our company or assets (including reorganization, termination, or liquidation).

• DATA TRANSFER

We will not disclose Personal Data to any third parties except (a) if required to do so under applicable laws; (b) to perform services to our clients; (c) to persons providing services to us (data processors) to the extent necessary for the provisions of such services to us and in accordance with the respective agreements between us and the service providers.

The Personal Data collected is mainly processed on servers within the European Union/European Economic Area. Where it is necessary to transfer Personal Data to countries outside the European Union, the requirement set forth under the respective European Union Commission’s standard contractual clauses is applicable.

• HOW DO WE PROCESS DATA? 

We implement organizational, technical, and physical security measures to protect your data from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. To ensure the adequate security and confidentiality of personal data, we implement the following security measures:

• Data transmission encryption.
• Strong user authentication.
• Restricted access to personal data for employees with necessary rights.
• Strengthened network infrastructure.
• Network monitoring solutions.
• Restrict physical access to data in the Data Controller’s premises only to authorized persons.

• WHAT ARE YOUR RIGHTS? 

Data subjects can exercise special rights under Articles 15-22 of the General Data Protection Regulation:

1. the rights to access your personal data;
2. the right to rectification;
3. the rights to erasure;
4. the right to restrict processing;
5. the right to object to processing;
6. the right to data portability;
7. the right to object to automated individual decision-making;
8. the right to complain to a supervisory authority and
9. in cases where the processing is based on your consent, the right to withdraw consent by contacting Nordic Houses OÜ.

For further information and/or for exercising your rights, feel free to contact us by using the information in the Data Controllers section. The respective applications must be submitted to Nordic Hourses in a format that can be reproduced in writing. It must also be possible to identify the person who submitted the request. In order to ensure data protection and properly exercise your rights, we have the right to ask you to provide proof of your identity. 

Contact Information for Nordic Houses KT OÜ Data Protection: 

Phone: +372 602 5300; 

Email: gdpr@houses.ee; 

Address: Sauli, Kosu village, Kuusalu Parish, 75608.